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We study the relation between process calculi that differ in their either synchronous or asynchronous 
interaction mechanism. Concretely, we are interested in the conditions under which synchronous 
interaction can be implemented using just asynchronous interactions in the ^-calculus. We assume 
a number of minimal conditions referring to the work of Gorla: a "good" encoding must be com- 
positional and preserve and reflect computations, deadlocks, divergence, and success. Under these 
conditions, we show that it is not possible to encode synchronous interactions without introducing 
additional causal dependencies in the translation. 
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1 Introduction 



We study the relation between process calculi that differ in their either synchronous or asynchronous 
interaction mechanism. Synchronous and asynchronous interactions are the two basic paradigms of 
interactions in distributed systems. While synchronous interactions are widely used in specification 
languages, asynchronous interactions are often better suited to implement real systems. We are interested 
in the conditions under which synchronous interactions can be implemented using just asynchronous 
interactions, i.e., in the conditions under which it is possible to encode the synchronous 7r-calculus into 
its asynchronous variant. To partially answer this question, we examine the role of causality for encoding 
synchrony. 

Of course, we are not interested in trivial or meaningless encodings. Instead we consider only those 
encodings that ensure that the original term and its encoding show to some extent the same abstract be- 
haviour. Unfortunately, there is no consensus about what properties make an encoding "good" (compare 
e.g. Ifl2l "). Instead, we find separation results as well as encodability results with respect to very different 
conditions, which naturally leads to incomparable results. Among these conditions, a widely used crite- 
rion is full abstraction, i.e. the preservation and reflection of equivalences associated to the two compared 
languages. There are lots of different equivalences in the range of ^-calculus variants. Since full abstrac- 
tion depends, by definition, strongly on the chosen equivalences, a variation in the respective choice may 
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change an encodability result into a separation result, or vice versa. Unfortunately, there is neither a 
common agreement about what kinds of equivalence are well suited for language comparison — again, 
the results are often incomparable. To overcome these problems, and to form a more robust and uniform 
approach for language comparison, Gorla ||5J identifies five criteria as being well suited for separation 
as well as encodability results. In this paper, we rely on these five criteria. Compositionality and name 
invariance stipulate structural conditions on a good encoding. Operational correspondence requires that 
a good encoding preserves and reflects the computations of a source term. Divergence reflection states 
that a good encoding shall not exhibit divergent behaviour, unless it was already present in the source 
term. Finally, success sensitiveness requires that a source term and its encoding have exactly the same 
potential to reach successful state. 

A discussion on synchrony versus asynchrony cannot be separated from a discussion of choice. When 
processes communicate via message-passing along channels, they do not only listen to one channel at a 
time — they concurrently listen to a whole selection of channels. Choice operators just make this natural 
intuition explicit; moreover, their mutual exclusion property allows us to concisely describe the particular 
effect of message-passing actions on the process's local state. Asynchronous send actions make no sense 
as part of a mutually exclusive selection, as they cannot be prevented from happening. Consequently, 
the asynchronous calculus only offers input-guarded choice. In contrast, synchronous send actions also 
allow for the definition of mixed choice: selections of both input and output actions. 

It is well known that there is a good encoding from the choice-free synchronous 7i-calculus into its 
asynchronous variant |0[8l|7l. It is also well-known ifTTl |6*1 [T3l that there is no good encoding from 
the full 7r-calculus — the synchronous 7r-calculus including mixed choice — into its asynchronous variant 
if the encoding translates the parallel operator homomorphically. Palamidessi was the first to point out 
that mixed choice strictly raises the absolute expressive power of the synchronous 7i-calculus compared 
to its asynchronous variant. Analysing this result lfl3l . we observe that it boils down to the fact that the 
full 7r-calculus can break merely syntactic symmetries, where its asynchronous variant can not; there 
is no need to refer to a semantic problem like the existence of solutions to leader election. Moreover, 
as already Gorla (6l states, the condition of homomorphic translation of the parallel operator is rather 
strict. Therefore, Gorla proposes the weaker criterion of compositional translation of the source language 
operators (see Definition [23] at page [94]). As claimed in Ifl4ll . this weakening of the structural condition 



on the encoding of the parallel operator turns the separation result into an encodability result, i.e., there 
is an encoding from the synchronous 7r-calculus (including mixed choice) into its asynchronous variant 
with respect to the criteria of Gorla^ Analysing the encoding attempt given in [14J, we observe that it 
introduces additional causal dependencies, i.e., causal dependencies that were not present in the source 
term and thus introduced by the encoding function. Note, that a step B is considered causally dependent 
on a previous step A, if B depends on the availability of data produced by A. In this paper, we show that 
this is a general phenomenon of encoding synchrony. 

Thus, as the main contribution of this paper, we show that — in the asynchronous 7i-calculus — there is 
a strong connection between synchronous interactions and causal dependencies. More precisely, we show 
that it is not possible to encode synchronous interactions within a completely asynchronous framework 
without introducing additional causal dependencies in the translation. Moreover, we discuss the role 
of mixed choice to derive this result for the 7r-calculus. The companion paper [ 17"] presents a similar 
result in the context of Petri nets. Hence, this connection between synchronous interactions and causal 
dependencies is presumably no effect of the representation of concurrent systems in either the 7i-calculus 



'Note that this encoding is neither prompt nor is the assumed equivalence x strict, so the separation results of [,5] and |6| 
do not apply here. 
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or Petri nets, but rather a phenomenon of synchronous and asynchronous interactions in general. 

Overview of the Paper. In £|2] we introduce the synchronous 7r-calculus and its asynchronous variant. 
We revisit some notions and results of QjJ, recall the five criteria of @ to measure the quality of an 
encoding, and talk about a definition of causality. In ^3] we present our separation result and discuss 
some observations on its proof. We conclude in £|4]with a comparison to a similar result in ifTTl . 

2 Technical Preliminaries 
2.1 The ^-calculus 

Our source language is the monadic Ti-calculus as described for instance in [16]. Since the main reason 
for the absolute difference in the expressiveness of the full 7r-calculus compared to the asynchronous 
71-calculus is the power of mixed choice we denote the full 7r-calculus also by 7r m j x . 

Let jV denote a countably infinite set of names and JV the set of co-names, i.e., jV = {n\n £ jV }. 
We use lower case letters a,a' ,a\, ... ,x,y, ... to range over names. 

Definition 2.1 (7T m i x ). The set of process terms of the K-calculus (with mixed choice), denoted by ^mix, 
is given by 

P::={vn)P \ P 1 \P 2 \ \P \ Y. n '- Pi 

iel 

where % ::= y (x) \ y (z) for some names n,x, y,z £ JY and a finite index set /. 

The interpretation of the defined process terms is as usual. Since all examples and counterexamples 
within this paper are CCS-like we omit the objects of actions. Moreover we denote the empty sum with 
and omit it in continuations. As usual we often notate a sum £, e { i u ....i„ } ^i-^i by % h -^m + • • • + Xi„-Pi„- 
As target language, we use 7i a , the asynchronous 7r-calculus (see [8] or Q). 

Definition 2.2 (n a ). The set of process terms of the asynchronous K-calculus, denoted by g? a , is given 
by 

P::=(vn)P \ P\ | P 2 \ \P \ | y(z) \ y{x).P \ [a = b}P 

for some names n,a,b,x,y,z £ . 

Here, we equip the target language with the match operator, because it is used in |[T4l . which intro- 
duces the only good encoding that we are aware of between the synchronous 7r-calculus (with mixed 
choice) and its asynchronous variant. With lfT4l . this encoding depends on the availability of the match 
operator in the target language; we do not yet know whether there is such an encoding without match. 
Since matching do increase the expressive power of the asynchronous 7r-calculus (see (3]), answering 
this question is an important task for future work. However, note that the proof of our main result in 
Theorem |3 . 8 1 does not depend on this decision. 

As shown by the encoding in ifTOl one could also use separate choice within an asynchronous variant 
of the calculus without a significant effect on its expressive power. We claim, that our main result does 



not depend on the decision whether to allow separate choice or not. In Section 3.1 we give some hints 
on how to change the proof to capture separate choice in the target language. 

We use capital letters P,P' ,Pi, . . . , Q,R, . . . to range over processes. If we refer to processes without 
further requirements, we denote elements of ^ m i x ; we sometimes use just when the discussion applies 



92 



Synchrony vs Causality in the Asynchronous Pi-Calculus 



P = Q if Q can be obtained from P by renaming one or more of the bound names in P, 
silently avoiding name clashes 

P\0 = P P\Q = Q\P P\ (Q\R) = (P\Q)\R [a = a]P = P \P = P\\P 

(vrc)0 = (vn)(vm)P = (vm)(vn)P P \ (yn)Q = (vn) (P \ Q) if n fn(P) 



Figure 1: Structural Congruence. 

to both calculi. Let fn(P) denote the set of free names in P. Let bn(P) denote the set of bound names in 
P. Likewise, n (P) denotes the set of all names occurring in P. Their definitions are completely standard. 

The reduction semantics of 7T m i x and 7i a are jointly given by the transition rules in Figure [2j where 
structural congruence, denoted by =, is given by the rules in Figure[T] Note that the rule COM a for com- 
munication in 7T a is a simplified version of the rule COM m ; x for communication in 7T m j x . The differences 
between these two rules result from the differences in the syntax, i.e. the lack of choice and the fact that 
only input can be used as guard in 7T a . As usual, we use = a if we refer to alpha-conversion (the first rule 
of Figure [T]) only. 



COM mix (...+y(x).P + ...) | (...+y(z) .(? + ...) i — >{ Z / X }P\Q 
COM a y{x).P\y(z)^{%}P 
Pi > P' Pi > P' 

Par — : — Res 



P\Q< — >P'\Q ' (vn)Pi — >(vn)P' 

p = p> p> | >Q> Q' = Q 



Cong 



Q 



Figure 2: Reduction Semantics of 7T m i x and 7T a . 

We use a, o', o~\, ... to range over substitutions. A substitution is a mapping { X[ / yi , . . . , x "/ y „ } from 
names to names. The application of a substitution on a term { X[ / yi , . . . , x "/ y „ } (P) is defined as the result 
of simultaneously replacing all free occurrences of y, by x, for i € { 1, . . . ,n }, possibly applying alpha- 
conversion to avoid capture or name clashes. For all names JV \ { yi, . . . ,y n } the substitution behaves 
as the identity mapping. Let id denote identity, i.e. id is the empty substitution. 

Let P i — > (P t/—t) denote existence (non-existence) of a step from P, i.e. there is (no) P' S & such 
that P i — > P'. Moreover, let ^=^> be the reflexive and transitive closure of i — > and let i — > m define an 
infinite sequence of reduction steps. 



The first quality criteria presented in Section 2.3 is compositionality. It induces the definition of a 
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context parametrised on a set of names for each operator of 7T m i x . A context ^([-]i, • . ■ , [•]«) is simply 
a 7r-term, i.e. a 7T a -term in case of Definition |2.5| with n holes. Putting some 7T a -terms P\,...,P n in this 
order into the holes [-]i, . . . , [•]„ of the context, respectively, gives a term denoted (P\, . . . ,P n ). Note 
that a context may bind some free names of P\ , . . . ,P n . The arity of a context is the number of its holes. 

2.2 Symmetry in the ^-calculus 

A network of degree n is a process (yx) (P\ | . . . | P n ) for some ngN, some P\ , . . . ,P n G and a sequence 
of names x. We refer to Pi , . . . ,P n as the processes of the network. Note that the processes of a network 
can be networks itself. A symmetric network of degree n is a network of degree n such that Pi = a' -1 (Pi ) 
for all i G { 2, . . . ,n } and some substitution a, called symmetry relation, such that a" = id. The minimal 
degree of a symmetry relation a is the smallest n > such that a" = id. A symmetric execution is an 
execution starting at a symmetric network of degree n, returning to a symmetric network of the same 
degree after any n'th step, and which is either infinite or terminates in a symmetric network of degree 
n. Let 7r sep be the subcalculus of 7T m i x with separate but no mixed choice, i.e. there is no sum with both 
input- and output-guarded summands, and let <^ S ep be its set of processes. The first and the last author 
ifTBl prove that it is not possible in 7T sep to break the symmetry of a symmetric network. More precisely, 
in Theorem 4.4 in fL3l . it is shown that any symmetric network in ^ sep has at least one symmetric 
execution. Since ^ a is a subset of & sep , we obtain the following lemma. 

Lemma 2.3. Every symmetric network in has at least one symmetric execution. 

Moreover, by Lemma 5.4 in 021, we know that if the minimal degree of the symmetry relation is 
smaller than the degree of the symmetric network, then not only the network can be subdivided into a 
network of symmetric networks but also its symmetric execution. As already done in ifTBl , we use this 
Lemma in the context of a symmetric network P \ P for some arbitrary P G ^ a . P \ P is a symmetric 
network of degree 2 with the symmetry relation id. The minimal degree of id is 1. Let P \ P ^> 
(vx ) (P 1 | a (P')) be a symmetric execution of P \ P for some P' G & a , a sequence of names x, and some 
symmetry relation a with a 2 = id. By Lemma 5.4 in [ 13], this symmetric execution can be subdivided 
such that there is an execution P !=>• (vx')P' for some sequence of names x'. 

Lemma 2.4. Let P, P' G ^ a , x be a sequence of names, and o be a symmetry relation with o 2 = id. 
Every symmetric execution P \ P 1=^- (vx) (P' \ O (P')) can be subdivided such that P l==> (vx')P' for 
some sequence of names x'. 

2.3 Quality Criteria for Encodings 

Gorla presented in [6 ] a small framework of five criteria well suited for language comparison. We use this 
five criteria to measure the quality of an encoding [ • ] from 7r m j x into 7T a , i.e. an encoding [ • ] is "good" 
if it fulfils the five criteria proposed by Gorla. Note that for the definition of these criteria a behavioural 
equivalence x on the target language is assumed. Its purpose is to describe the abstract behaviour of a 
target process, where abstract basically means with respect to the behaviour of the source term. 

The five conditions are divided into two structural and three semantic criteria. The structural criteria 
include (1) compositionality and (2) name invariance. The semantic criteria include (3) operational cor- 
respondence, (4) divergence reflection and (5) success sensitiveness. In the following we use S,S',Si, . . . 
to range over terms of the source language and T, T', 71, ... to range over terms of the target language. 

Intuitively, an encoding is compositional if the translation of an operator depends only on the trans- 
lation of its parameters. To mediate between the translations of the parameters the encoding defines a 
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unique context for each operator, whose arity is the arity of the operator. Moreover, the context can be 
parametrised on the free names of the corresponding source term. Note that our result is independent of 
this parametrisation. 

Definition 2.5 (Criterion 1 : Compositionality). The encoding [ • ] is compositional if, for every k-ary 
operator op of 7T m i x and for every subset of names N, there exists a k-ary context ([-]i, • • • , [•]&) such 
that, for all Si , . . . ,S k with fn (Si ) U . . . U fn (S k ) = N, it holds that 

[op(5 1 ,...,5,)]=<([S 1 ] ! ...,[5,]). 

The second structural criterion states that the encoding should not depend on specific names used 
in the source term. Of course, an encoding that translates each name to itself simply preserves this 
condition. However, it is sometimes necessary and meaningful to translate a name into a sequence of 
names or to reserve a couple of names for the encoding, i.e. to give them a special function within the 
encoding. To ensure that there are no conflicts between the names used by the encoding function for 
special purposes and the source term names, the encoding is enriched with a renaming policy <p|j, i.e., 
a substitution from names into sequences of name^] Based on such a renaming policy an encoding is 
independent of specific names if it preserves all substitutions a on source terms by a substitution a' on 
target terms such that a' respects the changes made by the renaming policy. 

Definition 2.6 (Criterion 2: Name Invariance). The encoding [ • ] is name invariant if, for every S and 
<7, it holds that 

I o(S)i °'^ S ^ if a is injective 
t~<r'([Sl) otherwise 

where a' is such that <pj j (a (a)) = a' (<pj j (a)) for every a € J/ '. 

The first semantic criterion is operational correspondence, which consists of a soundness and a com- 
pleteness condition. Completeness requires that every computation of a source term can be simulated 
by its translation, i.e., the translation does not reduce the computations of the source term. Soundness 
requires that every computation of a target term corresponds to some computation of the corresponding 
source term, i.e., the translation does not introduce new computations. 

Definition 2.7 (Criterion 3: Operational Correspondence). The encoding [ • ] is operationally corre- 
sponding if it is 

Complete: for all S 5', it holds that [ S J t=^X [ 5' J; 

Sound: for all [ S ] T, there exists an 5" such that 5 l=£- 5' and T ^=^x 

Note that the Definition of operational correspondence relies on the equivalence x to get rid of junk 
possibly left over within computations of target terms. Sometimes, we refer to the completeness criterion 
of operational correspondence as operational completeness and, accordingly, for the soundness criterion 
as operational soundness. 

The next criterion concerns the role of infinite computations in encodings. 

Definition 2.8 (Criterion 4: Divergence Reflection). The encoding [ • ] reflects divergence if, for every 
5, [5] i — > m implies 5 1 — > m . 



2 To keep distinct names distinct Gorla assumes that Vn,m £ JV .n^m implies <pj j (n) n <pj j (m) = 0, where <pj j (x) is 
simply considered as set here. 
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The last criterion links the behaviour of source terms to the behaviour of target terms. With Gorla 
[6], we assume a success operator / to be part of the syntax of both the source and the target language. 



Likewise, we add / to the syntax of 7T m ; x in Definition 2. 1 and of 7T a in Definition 2.2 Since / can 
not be further reduced, the operational semantics is left unchanged in both cases. Moreover, note that 
n(/) = fn(/) = bn(/) = 0, so also interplay of / with the =-rules is smooth and does not require 
explicit treatment. The test for reachability of success is standard. 

Definition 2.9 (Success). A process P € & may lead to success, denoted as P JJ-, if (and only if) it 
is reducible to a process containing a top-level unguarded occurrence of /, i.e. 3P' ,P" G & . P 
P'AP'=P" I /. 



Note that we choose may-testing here. However, as we claim, our main result in Theorem 3.8 holds for 
must-testing, as well. 

Finally, an encoding preserves the behaviour of the source term if it and its corresponding target term 
answer the tests for success in exactly the same way. 

Definition 2.10 (Criterion 5: Success Sensitiveness). The encoding [ • ] is success sensitive if, for every 
S, S JJ. if and only if [ S ] JJ. 

Note that this criterion only links the behaviours of source terms and their literal translations but not 
of their continuations. To do so, Gorla relates success sensitiveness and operational correspondence by 
requiring that the equivalence on the target language never relates two processes P and Q such that P Jj. 
and Q J/. 

Definition 2.11 (Success Respecting), x C ^ a x ^ a is success respecting if, for every P and Q with 
P JJ- and Q J/, it holds that P^Q. 



2.4 Causality 

Analysing the five criteria of the last section, we observe that there are two structural criteria to ensure that 
a good encoding is implementable, i.e., is of practical interest, and there are three criteria to ensure that 
the encoding preserves and reflects the main behaviour of source terms. However, there is no criterion 
requiring the preservation or reflection of causal dependencies. 

For the 7i-calculus usually two kinds of causal dependencies are distinguished (see |[T5l [H). The 
first one, called structural or subject dependencies, originates from the nesting of prefixes, i.e., from 
the structure of processes. A typical example of such a dependency is given by (vb) (a.b \ b.c) \ a \ 
c i — > (vb) (b | b.c) | c i — > c | c i — > 0. The second step on channel b is causally dependent on the first 
step, because it unguards b. So b is causally dependent on a. Similarly, c is causally dependent on 
b, and by transitivity c is causally dependent on a. The other kind of dependencies are called link or 
object dependencies and originate from the binding mechanisms on names. Here a typical example is 
(v*) (y (x) \x). In a labelled semantics the output on x is causally dependent on the extrusion of x by an 
output on y, i.e. x is causally dependent on y. 

We observe that causal dependencies are defined as a condition between actions or names of actions. 
In the context of encodings this view is problematic, because steps are often translated into sequences of 
steps and names may be translated into sequences of names. Moreover a sequence of steps simulating 
a single source term step may be interleaved with another such sequence or some target term steps used 
to prepare the simulation of another source term step, whose simulation may never be completed. So, 
what precisely does it mean for an encoding to preserve or respect causal dependencies? If source term 
names are translated into sequences of names should one consider the causal dependencies between all 
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such translated names or only between some of them? Moreover how should an encoding handle names 
reserved for some special purposes of the encoding function, i.e., target term names that do not result 
from the translation of a source term name? 

We have no final answer to these questions yet. However, in the next section we prove a separation 
result, which does not require a thorough answer to the questions above. Instead, we use a definition 
of causal dependencies that is based only on direct subject dependencies. So within this paper, a step B 
is considered causally dependent on a previous step A, if B depends on the availability of a capability 
produced by A. More precisely, step B is causally dependent on step A, if A unguards some capability, 
i.e., some input or output prefix, which is consumed by step B. An encoding preserves causal depen- 
dencies, if for any causal dependency between two steps of the source term there is a causal dependency 
between some steps of their simulations, and an encoding reflects causal dependencies, if for any causal 
dependency between two steps of different, completed simulations there is a causal dependency of the 
corresponding source term steps. 

3 Synchrony vs Causality 

In this section, we show that any good encoding from 7r m j x into 7T a introduces causal dependencies, i.e., 
is not causality respecting. 

3.1 Encoding Synchrony introduces Causal Dependencies 

To prove our main result we analyse the context introduced to encode the parallel operator and examine 
how this context has to interact with the encodings of its parameters to allow for a simulation of a source 
term step. We start with some observations concerning the three process terms 

P = a + a\b + bV, Q = P \ P, and R = a + b + bV | b + a + a.S, 

which are used in the following lemmata as counterexamples. Note that we choose Q, and R such 
that each of them is a symmetric network of degree 2 with either a = { a/b,b/a } or id as symmetry 
relation. Moreover to fix the context used to encode the parallel operator we choose P, Q, and R such that 
fn(P) = fn(<2) = fn(R) = { a,b }. Hence by compositionality for each of these three terms the outermost 
parallel operator is translated by exactly the same context 'tfS a ' h ^ ( [•] i , f-^)- 

Observation 3.1. There exists a context a ' b } ([•] i , [-] 2 ) such that [ P ] = a ' h } ([ a + a ] , [b + bV ]) , 

lQj=^ a ^({PUPj), a ndlRj=^ a ' b} {la + b + bVUb + a + aVj). 

We choose P such that none of its executions lead to success, i.e., P \/— > and P P \/— > implies, by 
operational soundness, that [ P ] can not perform a step that changes its state modulo x, i.e. [ P ] ^> Tp 
implies Tp ^=^-x [ P ] for all Tp G ^ a . By success sensitiveness, P $ implies [ P ] Because of that 
and since x is success respecting we have Tp $ for all Tp G such that [ P ] ^> Tp. 

Observation 3.2. V7> e ■ [ P j !=>■ T P implies T P ]jf 

Hence, any occurrence of / — if there is any — in the context ^ a ' h ^ ([•] i , [^i) is input guarded (since 
7T a forbids output guards) and the context can not remove such a guard on its own. In opposite to P we 
choose Q such that Q reaches an unguarded occurrence of success in any of its executions, i.e. Q ^> Q' 
implies Q' Jj- for all Q' G ^ m i x - By operational completeness, any execution Q i — > Q\ i — > Q2 > of Q 
can be simulated by its encoding, i.e. [ Q j & v { Q ] Q' 2 , and [ Q { j Q'{, where Q- x [ Q t ] for 
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i E { 1,2 } and <2 2 ~ [ 82 J- Note that any (maximal) execution of Q is such that Q 1 — » <2i 1 — > Q 2 >• 
for some <2i , Q 2 E <5^ m ix- By operational soundness for each Tq E & & such that [ (3 ] Tq, there is 
some g' E ^ m i x such that 2 i=> 2' and 7g l=^x iQ'j, i.e. there is some T' Q E ^ a such that T Q \=> Tq 
and Tq x [ <2' ]. By success sensitiveness, [ Q' ]] JJ. and since x is success respecting, we have Tq JJ.. 



Thus, by Definition |Z9} we have T Q JJ. for all T Q E ^ a with [ Q ] l=>- Tq. 

Observation 3.3. V7g E ^ a . [ 2 ] l=>- T Q implies 7g JJ. 

At last we choose 7? such that some of its executions lead to success while some do not. R can reduce 
either to / or to 0. By operational completeness, [ R ] can simulate both steps, i.e. [ R ] ^=^x [ ■/ ] and 
[ /? ] [ J. Since [ / J JJ. and [ ] J/, and since >c is success respecting, we have [/]^[0].By 

operational soundness, for all Tr E ^ a such that [ /? ] ^> Tr there is some 7?' E ^ m ix such that /? |=>- R' 
and r fi ^x [#]• 

Observation 3.4. 37^ , r Rj2 E ^ a . [ /? ] r Rjl A [ /? ] |=>- 7^ 2 A T RA JJ. A r Rj2 J/ 

Our last observation concerns the structure of the context c £^ a ' b ^ s ([-]i, [-] 2 ). Because there is no 

choice operator in the context a ' b ^ ([•] 1 , [^2) has to place its parameters in parallel, as this is the 
only binary operator for processes. However, even if we allow separate choice in the target language 
the encodings of the parameters have to be placed in parallel, because placing them within a choice 
would not allow to use the encodings of both parameters to simulate target term steps. Consequently, 
there must be some ^-contexts ^ ([•]), <af 2 ([•]), %{[■]) with {S 1 \S 2 } = ^ {a '* } ([Si J,[S 2 J) = 
{ft (I Si 1) I % ([ $2 ])), for all source terms S h S 2 € ^ mix with fn(5i | 5 2 ) = { a,b }. 

Observation 3.5. 3^ ([■]) ,tf 2 ([■]),% ([•]) . <^ a > 6} [-] 2 ) = *i (^ 2 (HO I % (H2)) 

Learning from the separation result in 11131 . we know that any good encoding from 7t m [ x into 7T a must 
break source term symmetries. To do so, we show that the context introduced by the encoding of the 
parallel operator (which is allowed in weakly compositional as opposed to homomorphic translations) 
must interact with the encodings of its parameters. 

Lemma 3.6. To simulate a source term step, ^"' b ^ ([-]\, [-] 2 ) and the encodings of its parameters have 
to interact. 

Intuitively we show, that if there is no such interaction, then since Q is a symmetric network its 
encoding behaves as a symmetric network again. Since any execution of [ Q ] leads to an unguarded 



occurrence of success, by symmetry and by Lemma 2.4 there is an execution of [ P ] leading to an 



unguarded occurrence of success, which contradicts Observation [X2] 

Proof. Assume the opposite, i.e. assume the context <^j { a ' b } ( [-] 2 ) is such that possibly after some 
preprocessing steps of the context on its own, e.g. to unguard the parameters, the source term steps can 
be simulated without any interaction with the context. In this case, we have 

[el^ {fl! " } ([Pl|[Pl)^i(^2([Pl)|%([Pl))^(vj)(a 1 ([Pl)|a 2 ([ J Pl)|r c ) 

for some constant term 7c, a sequence of names y, and two substitutions cii and a 2 . Note that 0\ and o 2 
capture renaming done by alpha conversion possibly necessary to pull restriction outwards. Since there 
is no need for an interaction, i.e. for a communication, with Tq to simulate source term steps, we can 
ignore it. 

If C\ = a 2 , then since these substitutions result from alpha conversion 0\ = a 2 = id. Then [ P ] | [ P ] 



is a symmetric network of degree 2 with id as symmetry relation. By Lemma 2.3 \ P J | \ P J has a 
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symmetric execution. By Observation 3.3 [ Q ] reaches an unguarded occurrence of success in any 
of its executions. Since the context and with it Tq can not reach success on its own and there is no 
interaction, [ P ] | [ P ] reaches success in its symmetric execution. Then there is some Tq E & a such that 

[ P 1 I [ P 1 ( v *) \ Tq I 03 [Tq J J is a symmetric execution for some sequence of names x and some 
symmetry relation 03 of degree 2 and (vx) ^Yg | CT3 (TqJ ^ has an unguarded occurrence of success. By 
symmetry and since n (/) =0, this implies that Tq as well as 01 Tq J has an unguarded occurrence of 



success. Since 2 is not the minimal degree of identity, by Lemma 2.4 this symmetric execution can be 
subdivided such that [ P ] !=>• {vx') Tq for some sequence of names x'. Then [ P ] J]., because of the 



3.2 



unguarded occurrence of / in Tq. That contradicts Observation 

The argumentation for Oi ^ Oi_ is similar but more difficult. In this case (Ti(|P])|oi([P])is still a 
symmetric network whose symmetric execution leads to an unguarded occurrence of success. But since 
its symmetry relation is not id we can not apply Lemma 2.4 However, because C\ and 02 result from 
alpha conversion, they rename free names of [ P ] to fresh names. If CTj ([P ]) and 02 (\P 1) want to 
interact on such a fresh name, then they have first to exchange this fresh name over a channel known to 
both. Let us denote this channel by z. So either G\ {[P J) receives a fresh name from 02 {\ P J) over z 
or vice versa. By symmetry both terms have an unguarded input as well as an unguarded output on z, 
so — instead of a communication between these two processes — (J\ ([[ P J) can as well reduce on its own. 
Adding this argumentation to the argumentation in the proof of Lemma [2~4| in ifTBl we can prove again 
that the symmetric execution of G\ ([ P\) | 02 ([-P J) can be subdivided such that G\ ([P J) JJ-. Because 
n(/) =0, this implies [ P ] JJ-. Hence, to simulate a source term step, the context necessarily has to 
interact with its parameters. □ 



Note that the only possibility for the context to interact with its parameters is by communication. 
So the context contains at least one capability, i.e., input or output prefix, that needs to be consumed to 
simulate a source term step. Without loss of generality let us assume that indeed only a single capability 
needs to be consumed to simulate a step, i.e. a single communication step of the context with (one of) 
its parameters suffices to enable the simulation of a source term step. The argumentation for a couple of 
necessary communication steps is similar. Let us denote this capability by /jQ 

Next we show, that it is not possible to simulate two different source term steps between the param- 
eters of ^ " lb ^ ([-]i, W2) at the same time. 

Lemma 3.7. At most one simulation of a source term step can be enabled concurrently by the context 

Here we use R as a counterexample. R can reduce either to or /, so the choice operator introduces 
mutual exclusion. Without choice mutual exclusion is not that easy to implement, because of its ability 
to immediately block an alternative reduction. We show that the simulation of these blocking introduces 
either deadlock or divergence. 

Proof. Assume the opposite, i.e. assume that the context c €^ a ' h ^ ([-]i,[-]2) provides several instances 
of il, e.g. by replication, and with them it enables the simulation of different alternative source term 
steps concurrently. Consider the source term R. Since {a/b,b/a} (a + b + b./) = b + a + by name 

3 In case of a sequence of necessary steps, choose such that it denotes the capability consumed at last in this sequence. In 
case there are different ways to enable the simulation of a step, consider a set of those capabilities with one fl, for each such 



way. 
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invariance, there is some substitution a' such that o' {\a + b + b./\) = a \ b + a + a./\, i.e. these two 
terms are equal except to some renamings of free names. 

Note that R can perform either a step on channel a or b. Since there is no choice operator in 7T a , 
the encodings of the capabilities of the sums a + b + b.S and b + a + a./ have to be placed somehow 
in parallel such that the simulation of the source term step on a does not immediately withdraw the 
encodings of the capabilities on b and vice versa. Thus, since the simulation of both steps of R are enabled 
concurrently, there is some point in the simulation of one source term step that disables the completion of 
the simulation of the respective other source term step. Therefore, one simulation has to consume some 
capability that is necessary to complete the other simulation. Remember, that we assume that the only 
capability of the context c to^"' ,b ^ {[■]]_, necessary to be consumed to simulate a source term step is 11. 
Hence, to allow the simulation of one step of R, to disable the simulation of the respective other step of 
R, and since a' ([S+ b + &./]) = a \ b + a + a. /J, there is some capability in [ a + b + b./ ] as well 
as in [ b + a + a./ J and, to simulate a source term step, both of these capabilities have to be consumed. 
Moreover, since a' (l~a + b + b. /]) = a \ b + a + a. /], both capabilities are of the same kind, i.e. both 
are either input prefixes or both are output prefixes. Note that there is no possibility in 7T a to consume 
two capabilities of the same kind within the same target term step. Then it can not be avoided that for 
each of the simulations of the two steps exactly one of these two capabilities is consumed. In this case, 
none of the simulations can be completed, i.e., there is some local deadlock. 

Considering [ <2 ], such a deadlock leads to a term Tq with [ Q ] ^> Tq and, since none of the source 
term steps is simulated, no unguarded occurrence of / is reached, i.e. Tq With that, such a deadlock 
leads to a contradiction. 

The only way to circumvent a deadlock in this situation, is that one of these capabilities is released 
by one of these simulations. To complete the simulation of this step later on, it has to be possible that the 
released capability is consumed again. But then it can not be avoided that this is done before the other 
simulation is finished, i.e. that leads back to the situation before. Then we introduce divergence, i.e., 
contradicts divergence reflection. Thus, it is not possible that the simulation of alternative source term 
steps is enabled concurrently. □ 

Note that, even if we allow separate choice within the target language, the simulation of the source 
term step on a can not immediately withdraw the encodings of the capabilities on b and vice versa. 
Because either we have to split each of these sums into an input and an output guarded sum or we 
have to convert each of them into a single sum with only separate choice. In the second case, since by 
compositionality both parameters have to be encoded in exactly the same way, we either result in two 
input guarded or two output guarded sums. But then we can not simulate a communication between these 
to sums within a single step and, moreover, we can not decide within a single step whether a considered 
capability can be used to successfully simulate a source term step. Unfortunately, the first step used 
to try whether we can use this capability to simulate a source term step removes all the other encoded 



capabilities of that sum, which violates operational correspondence. So Lemma 3.7 holds as well for 
separate choice in the target language. 

Now we can prove the main result of this paper. 

Theorem 3.8. Any good encoding from 7T m j x into 7T a introduces additional causal dependencies. 



By Lemma 3.6 and Lemma 3.7 the context must contain some capability, i.e. some kind of lock, that 
must be consumed to enable the simulation of a source term step. Moreover, to enable the simulation of 
subsequent source term steps, the capability that was consumed from the context must be restored. Then, 
a subsequent simulating sequence is enabled by the consumption of a capability that was produced by a 
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former simulating sequence; this interplay imposes a causal dependence between subsequent simulations 
of source term steps. 



Proof. By Lemma 



3.6 



and Lemma 



3.7 



the context tf, {a ' b} 



Ih) provides exactly one instance of 
fx, i.e., one capability, that needs to be consumed to simulate a source term step. Since [ Q ] ^=^> Q\, 

G2, where g/ x [ Q, J for i 6 { 1,2 } and <2' 2 ' x [ Q 2 J, i.e. [ 2 1 simulates 



IQ}^Q' 2 , and [fill 

two subsequently source term steps, the instance of consumed by the simulation of the first source term 
step has to be restored during this first simulation such that the second step can be simulated. Thus, the 
simulation of the second step has to consume some capability 11 produced by the simulation of the first 
step. Then the simulation of the second step causally depends on the simulation of the first step, although 
any pair of subsequent steps of Q are causal independent. We conclude that the encoding function adds 
additional causal dependencies. □ 



3.2 Discussion 



It is no fortuity that the counterexamples in the proof of Theorem 3.8 rely on mixed choices. It is the 
power of mixed choice that allows 7T m j x to break initial symmetries. Note that the separation results 
of flU and |[T3l are based on that absolute difference in the expressive power of 7T m i x compared to 7T- 
calculus variants without mixed choice. In [|6]|, the role of breaking symmetries for the separation result 
is not equally obvious. Nevertheless, the counterexample used there also relies on mixed choices and 
their ability to break symmetries. In summary, the difference in the expressive power of 7T m j x compared 
to 7T a essentially — if not exclusively — relies on the expressive power of mixed choice. 



Synchrony versus Guarded Choice. It is debatable in how far a discussion on synchrony versus asyn- 
chrony can be separated from a discussion of choice. In fact, even from a pragmatic point of view within 
our model of distributed reactive systems, it cannot. It is part of the nature of reactive systems — in our 
case: systems communicating via message-passing along channels — that agents do not only listen to one 
channel at a time; they concurrently listen to a whole selection of channels. In this respect, as soon as a 
calculus offers a synchronous (blocking) input primitive, it is natural to extend this primitive to an input- 
guarded choice. Having mutual exclusion on concurrently enabled inputs is useful when thinking of a 
process's local state that may be influenced differently by any received information along the competing 
input channels. {Joint input ||9), as motivated in the join calculus EJ, represents another natural and in- 
teresting generalisation.) Likewise, as soon as a calculus offers synchronous output, one may generalise 
this primitive to output-guarded choice. This generalisation seems less natural, though, as the process's 
state would hardly be influenced by a continuation of one of the branches after an output. However, 
having both input- and output-guards in the calculus, mixed choice becomes expressible. Mixed choice 
is again also natural, as the successful execution of an output may prevent a competing input, including 
the effect of the latter on the local state. These pragmatic arguments support the point of view that, in a 
message -passing scenario, any discussion of synchronous versus asynchronous interaction must consider 
a competitive context, as expressed by means of choice operators. 



The Role of Mixed Choice. In the proof of Lemma 3.6 a counterexample based on mixed choice is 
used not only to rule out that the parallel operator is translated homomorphically (compare to the ar- 
gumentation of the separation results in ifTTI . |6l , and lfT3l ) but also to prove that, in order to break 
symmetries, the context introduced to encode the parallel operator must interact with the encodings of its 
parameters. Moreover, only with mixed choice it is possible to give an example of a symmetric network 
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with two conflicting steps on two different channels. This is necessary in the proof of Lemma 3.7 to 
show that the context can not enable the simulation of more than one source term step at a time. Since 
the two source term steps are on different channels, their simulation is on the encoding of different ca- 
pabilities, i.e. the simulations do not interfere by interaction on the same encoded capabilities. Because 
the two source term steps are in conflict, operational completeness in combination with success sensi- 
tiveness forbids that both simulations are completed successfully. We conclude that the simulation of 
one source term step must inevitably disable the successful completion of the conflicting source term 
step by the consumption of some necessary capability. Since the source terms are on different channels, 
this capability is not due to the encoding of a source term capability but added to the encoding of the 
corresponding process of the source term network. The symmetry of the source term allows to apply the 
name invariance criterion to conclude that both processes of that symmetric source term net are encoded 
symmetrically. Hence, there is one instance of the respective capability in each encoded process. Now, 
the simulation of one of the two conflicting steps has to consume both such capabilities. As explained 
above two concurrently enabled simulations then compete for these capabilities, which leads to deadlock 
or divergence. Note that deadlock would violate operational soundness. 

Interestingly, the necessity of such a capability to rule out conflicting steps as well as the associated 
danger to introduce deadlock or divergence was already pointed out by Nestmann iflOll . presenting a 
good encoding from 7T sep into n a . To rule out conflicting steps on the same sum, the encoding of a sum 
introduces a so-called sum lock: a boolean- valued lock that is initially instantiated with true, but is set to 
false as soon as some summand of the sum commits to successfully simulate a source term step. Using 
this sum lock, the encoding function does not only forbid to use that summand twice but also to use 
any other summand of that sum to simulate subsequently source term steps. Hence, this sum lock of the 
encoding in iflOl does exactly occupy the role of the capability consumed by the simulation of a step to 
rule out the simulation of a conflicting step as described above. Note that the encoding presented in iPTOl 
translates the parallel operator homomorphically and thus is no good encoding from 7T m i x into 7T a . ifTOl 
explains that the application of that encoding function to terms with mixed choices — or, more precisely, 
in the presence of mixed choices with cyclic dependencies between the links of matching capabilities as 
in R or Q — leads to exactly the deadlocked situation described in the proof above. 

The proof of Theorem |3 . 8 1 reveals the solution to circumvent this problem with the so-called cyclic 
sums. The encoding of the parallel operator has to ensure that there is at most one simulation of a source 
term step between the two parameters of that parallel operator at the same time. In fact, it is exactly this 
required blocking of alternative steps that leads to additional causal dependencies. As claimed in |[T4ll . 
the introduction of a lock at the level of the encoding of a parallel operator indeed suffices to circumvent 
the problem of cyclic sums. Note that, in the appendix of |[T4ll . the main line of argumentation of a 
respective proof is given. Moreover, it is explained in more detail how — in the context of that particular 
encoding — this lock leads to additional causal dependencies. It is the temporal blocking of the simulation 
of source term steps, necessary to avoid deadlock or divergence in case of conflicting source term steps, 
that leads to additional causal dependencies in case of concurrent source term steps. 



True Concurrency. Let us take a closer look at the kind of additional causal dependencies an encoding 
function must, according to the above proof, introduce to encode synchronous interactions. We observe 
that the proof induces a causal dependency between the simulation of all subsequent source term steps 
between the two sides of the same parallel operator. Moreover, we observe that a later such step is 
causally dependent of a former one, but that no fixed order on the simulations of steps is induced. The 
same observation holds for the encoding presented in lfl4l : it is forced to block some simulations of 
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Figure 3: A fully reached, pure M ifTTl . 



source term steps until another simulation is finished, but there is no directive on which kind of steps 
have to be simulated first. Hence, the simulation of two concurrent source term steps can still appear in 
either order but, if both steps are due to a communication over the same parallel operator, i.e. between 
the same processes of a network, the corresponding simulations can not be performed truly concurrently. 
Note that the proof above does not state that the described additional causal dependency is the only kind 
of causal dependency any good encoding of synchrony has to introduce. This might be an interesting 
question for further research. 



4 Conclusion 

We show that, in the context of the 7r-calculus, any good encoding of synchronous interaction within 
a purely asynchronous setting introduces additional causal dependencies and, thus, reduces the number 
of truly parallel steps of the original term. Moreover, the proof of this result further illustrates the 
importance of the role of mixed choice to distinguish the expressive power of 7T m i x and 7T a . To tighten 
that view on the importance of mixed choice for the introduction of causal dependencies in encoding 
synchrony, we have to show that the encoding from 7T sep into 7T a presented in [10] does not introduce 
additional causal dependencies. This statement seems intuitively correct; we leave its formal proof for 
further research. 

As already mentioned, there is a companion paper IfTTl that proves a result similar to Theorem [378 



in 



the context of Petri nets. More precisely, they show that it is not always possible to find a finite, 1-safe, 
distributed net which is completed pomset trace equivalent to a given net. Note that completed pomset 
trace equivalence is sensitive to (local) deadlocks and causal dependencies. Hence, the connection be- 
tween synchronous interactions and causalities, i.e., that any good encoding of synchrony changes the 
causal semantics of the source, is no effect of the representation of concurrent systems in either the n- 
calculus or Petri nets, but seems to be a phenomenon of synchronous and asynchronous interactions in 
general. 

A closer look at the proof in IfTTl reveals that this proof depends on a counterexample including a 
so-called fully reached pure M (see Figure[3]>. Similarly, our result depends on counterexamples that are 
symmetric networks including mixed choices. In both cases, the counterexample refers to a situation in 
the synchronous setting in which there are two distinct but conflicting steps. To solve this conflict, two 
simultaneous activities are necessary — in case of the 71-calculus the reduction of two sums, in case of 
Petri nets the removal of two tokens. In the asynchronous setting, this simultaneous solution must be 
serialised, e.g., by means of some kind of lock. It blocks the enabling of the asynchronous simulations 
of source term steps, such that no two simulations of conflicting source steps are enabled concurrently. 
In both formalisms, Petri nets and the 7i-calculus, it is this temporal blocking of the simulation of source 
term steps — necessary to avoid deadlock or divergence in case of conflicting source term steps — that 
leads to additional causal dependencies. 

However, apart from this apparent similarity, the relation between the two results leaves us with a 
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number of open problems and incites further directions of research. To begin with, the requirements 
imposed on 7r-calculus implementations and Petri net implementations take rather different forms. Ad- 
ditionally, in contrast to the Petri net result, the present paper has no need to employ a (pomset based) 
equivalence to compare source and target terms and also does not need to deal with infinite implementa- 
tions specifically. On the other hand, the Petri net result does not impose any restrictions on the encoding 
itself, but it connected source and target nets by means of behaviour only without any reference to the net 
structure. Finally, the Petri nets considered in ifTTTl are not Turing-complete. So is it possible to derive 
the same result considering a Turing-complete formalism as for instance Petri nets with inhibitor arcs? 
We hope to answer some of these questions in future work. 
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